CVE-2023-49441
Fixed in a distro release EPSS <1%CVSS 7.5
dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.
Products: thekelleys dnsmasq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | dnsmasq | 2.76-16.amzn2.1.5 |
| Amazon Linux 2 | dnsmasq-utils | 2.76-16.amzn2.1.5 |
| Debian 12 | dnsmasq | 2.90-1 |
| Debian 13 | dnsmasq | 2.90-1 |
| Debian 14 | dnsmasq | 2.90-1 |
| Ubuntu 20.04 LTS | dnsmasq | 2.90-0ubuntu0.20.04.1 |
| Ubuntu 22.04 LTS | dnsmasq | 2.90-0ubuntu0.22.04.1 |
| Ubuntu Pro 16.04 LTS | dnsmasq | 2.90-0ubuntu0.16.04.1+esm1 |
| Ubuntu Pro 18.04 LTS | dnsmasq | 2.90-0ubuntu0.18.04.1+esm1 |
| openSUSE Tumbleweed | dnsmasq | 2.90-2.1 |